Patent 
62478.1300 

IN THE CLAIMS ; 

Please amend the claims as follows: 

1. (Cancelled) 

2. (Previously Presented) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus comprising a machine 
readable memory that provides instructions for solving a system of linear equations Ax=b 
in n unknowns on a finite field GF(p), where p is a prime, n is a positive integer, A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n elements, 
which when executed by a machine, cause said machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=b of the read coefficient matrix A and the read constant vector b\ 
and 

( 
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performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein^ 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx^d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax^b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 
a nonzero coefficient chosen from the object equation, and values 
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generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 



3. (Cancelled) 

4. (Previously Presented) The apparatus of Claim 2, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (1=1,2, ...,n) 

and the inverses of the diagonal elements mi (i=l,2,...,n) in the finite field GF(p) 
are denoted by // (7=7,2,. . . ,n), calculating inverses of diagonal elements of the 
coefficient matrix C includes 

(a) computing values / and U where 



n 




and 




n 



(b) computing u where 



u=l/t modp 



and 



(c) 



computing values It where 
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li-uxti mod p (1=1,2, ...,n) 
to find the inverses h (i=l,2, ...,n). 

5. (Currently Amended) The apparatus of Claim 4, 

wherein computing the values t and U includes calculating 
Sj-ntjxm2 modp 
S2=sixms modp 

[[ = ]] 

s n -i=s n -4><yn n -2 modp 
in the stated order, then calculating 

tn=Sn-3><M n -i mod p 

t n -i=s n -3xmn mod p 
s n =m n .]xm n mod p 
t n -2 = s n -4 xs n modp 
s n .}=m n . 2 xs n modp 

tn-3=Sn-5><Sn-l mod p 

s n -2=m n -3 x Sn-i modp 

t n -4=S n -6 x Sn-2 modp 

[[=]] 

Ss=m4XS6 modp 
t3=S[XS5 modp 
S4=m3xss mod p 
t2=m/xs 4 mod p 



62478. 1 300\PRICEJ\1RV\43 1618 



5 



Patent 
62478.1300 



tj=m2><S4 mod p 
in the stated order, and lastly calculating 
t=tjxrrij 

for a value j chosen from a set of positive integers {1,2, ...,n }. 

6. (Previously Presented) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus comprising a machine 
readable memory that provides instructions for solving a system of linear equations Ax=b 
in n unknowns on a finite field GF(p), where p is a prime, n is a positive integer, A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n elements, 
which when executed by a machine, cause said machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=b of the read coefficient matrix A and the read constant vector b\ 
and 



62478. 1 300\PRJCEJ\I RV\43 1618 



6 



Patent 
62478.1300 



performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax-b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process, 
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(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 

or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 

coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equation, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equation 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 
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7. (Previously Presented) The apparatus of Claim 2, 

wherein when the diagonal elements of the coefficient matrix C are denoted by m\ 

(i=l,2, ...,n) and the inverses of the diagonal elements m\ (i=l,2, ...,n) in the finite 
field GF(p) are denoted by Ij (i=l,2,...,n) , calculating inverses of diagonal 
elements of the coefficient matrix C includes 

(a) a multiplying unit for computing values t and where 

n 

t i = Y\ m k ( exce Pt m i> modp (i=l,2>. . • ,n) 
k=\ 

and 

n 

t =Y\m k modp 

(b) computing a value u where 
w=l//modp 

and 

(c) computing values where 
7i-=Mx// mod p (/=l,2,... ? n) 

to find the inverses (i=l,2, ...,n). 

8. (Currently Amended) The apparatus of Claim 7, 
wherein computing values t and U includes calculating 

Sj=mjxm2 mod p 
S2=S}xms modp 

[[=]] 

s n -3=s n .4xm n . 2 modp 
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in the stated order, then calculating 
t n =s n .sxm n .i mod p 
tn-}=Sn^ x m n modp 
s n =m n -jxm n mod p 

tn-2=S n -4XS n mod p 
Sn-l=mn-2 x Sn mod p 
tn-3=S n -5XS n -l mod p 

s n -2=m„-3xs n -i modp 

t n -4=S n -6XSn-2MOdp 
[[ = ]] 

Ss=m4XS6 mod p 
t3~sjxs5 modp 
S4=m3xss mod p 
t2=mixs 4 modp 
tj=m2XS4modp 
in the stated order, and lastly calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n }. 

9. (Previously Presented) An apparatus for computing an inverse / of an element y in GF(q) 
which is an extension field of a finite field GF(p), where p is a prime, q=p n , and n is a 
positive integer, the apparatus comprising: 
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equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions x k (k-0. t I, 2, n-1) of the system of linear 
equations Ax—b\ and 

inverse computing means for computing the inverse /, I=xo+xia+... +x n .ja n ~ 1 t using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; wherein 

the equation solving means includes a machine readable memory that provides 
instructions for solving the system of linear equations Ax=b where A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n 
elements, which when executed by a machine, cause said machine to perform 
operations comprising 

reading a stored coefficient matrix A and a stored constant vector b, 

triangular transforming the read coefficient matrix A and constant vector b to 
generate a coefficient matrix C and a constant vector d for a system of 
linear equations Cx^d in n unknowns that is equivalent to the system of 
linear equations Ax=b, the coefficient matrix C consisting of elements of n 
rows and n columns and the constant vector d consisting of n elements, 
wherein the coefficient matrix A is triangular transformed into the 
coefficient matrix C of upper triangular form without a division on the 
finite field GF(p) being performed, 

calculating inverses of diagonal elements of the generated coefficient matrix C on 
the finite field GF(p), and 

solving the system of linear equations Cx=d using the generated coefficient 

matrix C, the generated constant vector d, and the calculated inverses of 
the diagonal elements of the generated coefficient matrix C, to thereby 
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solve the system of linear equations Ax=b of the read coefficient matrix A 
and the read constant vector b. 

10. (Currently Amended) The apparatus of claim 2, the apparatus computing an inverse / of 
an element^ in GF(q) which is an extension field of a finite field GF(p), where q=p n , the 
apparatus further comprising: L 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a\ 

equation solving means for finding solutions xu (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse I, I=xo+xja+ ...+x n -ja n ~ ] , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse I. 

11. (Cancelled) 

12. (Previously Presented) The apparatus of claim 4, the apparatus computing an inverse / 
of an element^ in GF(q) which is an extension field of a finite field GF(p), where q=p% 
the apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
6-using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a; 
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equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the-machine readable 
memory; 

and 

inverse computing means for computing the inverse /, Mxo+x/a-K.. +x n .ia n ~ 1 , using the 
root a and the solutions x k (k=0, 1, 2, ...,-n-l) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

13. (Previously Presented) The apparatus of claim 5, -the apparatus computing an inverse / of 
an element y in GF(q) which is an extension field of a finite field GF(p), where q=p n , the 
apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a\ 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; 

inverse computing means for computing the inverse /, 7=xo+xya+... +x n .ia n ~ } , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse L 
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14. (Previously Presented) The apparatus of claim 6, the apparatus computing an inverse I of 
an element^ in GF(q) which is an extension field of a finite field GF(p), where q=p n , the 
apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element;; and all coefficients of a generator polynomial oiGF(q) 
. whose root is a; 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax-b 9 the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse I, I=xo+xja+ ... +x„./a"~ 7 , using the 
root a and the solutions x k (k=0, h 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

15. (Previously Presented) The apparatus of claim 7, the apparatus computing an inverse / of 
an element^ in GF(q) which is an extension field of a finite field GF(p), where q=p n , the 
apparatus comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions x k (k=0, 1,2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse /, I=xo+x I a+...+x n .ia n ~ I , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 
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means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

16. (Previously Presented) The apparatus of claim 8, the apparatus computing an inverse I of 
an element^ in GF(q) which is an extension field of a finite field GF(p) 9 where q=p n , the 
apparatus comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element^ and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse /, I=xo+xia+... +x n .ia n ~ l , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

17. (Previously Presented) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p n , n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 
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equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions (k=0, l y 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including and 

inverse computing means for computing the inverse /, I=xo+xja+... +x n -ja n ~ j \ using the 
root a and the solutions x k (k=0, 1,2, n-1) found by the equation solving 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium; 
wherein 

the equation solving means includes a machine readable memory that provides 
instructions for solving the system of linear equations Ax=b where A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n 
elements, which when executed by a machine, cause said machine to perform 
operations comprising 

reading a stored coefficient matrix A and a stored constant vector b, 

triangular transforming the read coefficient matrix A and constant vector b to 
generate a coefficient matrix C and a constant vector d for a system of 
linear equations Cx=d in n unknowns that is equivalent to the system of 
linear equations Ax=b, the coefficient matrix C consisting of elements of n 
rows and n columns and the constant vector d consisting of n elements, 
wherein the coefficient matrix A is triangular transformed into the 
coefficient matrix C of upper triangular form without a division on the 
finite field GF(p) being performed, 

calculating inverses of diagonal elements of the generated coefficient matrix C on 
the finite field GF(p) 9 and 
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solving the system of linear equations Cx^d using the generated coefficient 

matrix C, the generated constant vector d 9 and the calculated inverses of 
the diagonal elements of the generated coefficient matrix C, to thereby 
solve the system of linear equations Ax^b of the read coefficient matrix ,4 
and the read constant vector b. 

18. (Previously Presented) The apparatus of claim 2 wherein the apparatus is a record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element y in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]] the finite field GF(p), q=p n , and G is a base point of the elliptic 
curve E, the record medium reproducing apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element^ and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the-machine readable 
memory; and 

inverse computing means for computing the inverse /, I=xo+xja+... +x n .ia n ~ ! , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium. 

19. (Cancelled) 

20. (Previously Presented) The apparatus of claim 4 wherein the apparatus is a record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
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for security and recorded on a record medium, an inverse I of an element j> in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of the finite field GF(p) 9 q=p n , and G is a base point of the elliptic curve 
E, the record medium reproducing apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element^ and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions x k (k-0, I, 2, n-1) of the system of linear 
equations Ax=b 9 the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse 1, I=xo+xja+... +x / ,./a w " / , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

21. (Previously Presented) The apparatus of claim 5, wherein the apparatus is a record 

medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element^ in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of the finite field GF(p), q=p n , and G is a base point of the elliptic curve 
E 9 the record medium reproducing apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element^ and all coefficients of a generator polynomial ofGF(q) 
whose root is a\ 

equation solving means for finding solutions** (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 
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inverse computing means for computing the inverse /, I=xo+xia+ ..^x^icd 1 ' 1 , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving . 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium. 

22. (Currently Amended) The apparatus of claim 6, wherein the apparatus is a record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse I of an element^ in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of the finite field GF(p), q=p n , and G is a base point of the elliptic curve 
E, the record medium reproducing apparatus further comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element^ and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse /, I=xo+x/a+... +x n ,/a' 1 * 7 , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

23. (Previously Presented) The apparatus of claim 7, wherein the apparatus is a record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element _y in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
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extension field of the finite field GF(p), q=p n , and G is a base point of the elliptic curve 
E, the record medium reproducing apparatus further comprising: 

equation generating means for generating the coefficient matrix^ and the constant vector 
b using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions xu (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 

inverse computing means for computing the inverse /, I=xo+xja+... J rx n -ia n ' 1 y using the 
root a and the solutions** (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

24. (Previously Presented) The apparatus of claim 8, wherein the apparatus is a record 

medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element _y in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of the finite field GF(p), q=p n , and G is a base point of the elliptic curve 
E 9 the record medium reproducing apparatus comprising: 

equation generating means for generating the coefficient matrix A and the constant vector 
b using the element y and all coefficients of a generator polynomial of GF(q) 
whose root is a; 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; and 
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inverse computing means for computing the inverse /, I=xo+xia+~> +x n .i(x~ l , using the 
root a and the solutions % (k=0, h 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

25. (Cancelled) 

26. (Previously Presented) A machine based method for use in one of: secret 
communications by encryption and decryption; digital signature generation and 
verification; and data conversion including encoding and decoding of data, the method 
solving a system of linear equations Ax=b in n unknowns on a finite field GF(p) where p 
is a prime, n is a positive integer, A is a coefficient matrix consisting of elements of n 
rows and n columns, x is a vector of unknowns consisting of n elements, and b is a 
constant vector consisting of n elements, the method comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of //elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
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equations Ax =bi of the read coefficient matrix A and the read constant vector 6, 
and 

performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process, 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear. equations in n unknowns that is equivalent to 
the system of linear equations before the transformation in each transformation 
process, one pivotal equation which is a linear equation in n unknowns serving as 
a pivot for the transformation and one or more object equations which are linear 
equations in n unknowns to be transformed are chosen from the system of linear 
equations in n unknowns that is subjected to the transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 
a nonzero coefficient chosen from the object equation, and values 
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generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 



27. (Cancelled) 

28. (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mj (7=7,2, ...,n) 

and the inverses of the diagonal elements mi (7=7,2, ... 9 n) in the finite field GF(p) 
are denoted by 7} (7=7,2,. . . ,n) 9 calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values / and // where 



t i = Y\ m k ( exce Pt m i) m °d p (i=l,2,. . . ,n) 



and 




(b) 



computing value u where 



u-l/t mod p 



and 



(c) 



computing values 7/ where 
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Ii=uxti mod p (i=l,2, ...,n) 
to find the inverses 7, (i=l,2, ...,n). 

29. (Currently Amended) The method of Claim 28, 

wherein the computing the values t and ti includes calculating 
Si=mjxm2 mod p 
S2-sixm^modp 
[[ = ]] 

SnS =S n -4 Xm n . 2 Mod p 

in the stated order, then calculating 

tn=s n .ixm n -i mod p 
t n -i=Sn-3><m n modp 
s n ~m n .jxm n mod p 

t n -2=S n -4 x Sn mod p 

s n -i=m n .2xs n mod p 
t n .3=s n _ 5 xs n - } modp 

Sn^m^sXSn.j Mod p 

t n -4=s n -6xs n -2 mod p 

[[■■■]] 

S5=m 4 xs6 modp 
t3=Sixs5 modp 
s^m^xs^modp 
t2=mjxs4 modp 
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tt~m2><S4 modp 
in the stated order, and lastly calculating 

t=tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n}. 

30. (Previously Presented) A machine based method for use in one of: secret 

communications by encryption and decryption; digital signature generation and 
verification; and data conversion including encoding and decoding of data, the method 
solving a system of linear equations Ax=b in n unknowns on a finite field GF(p) where p 
is a prime, n is a positive integer, A is a coefficient matrix consisting of elements of n 
rows and n columns, x is a vector of unknowns consisting of n elements, and b is a 
constant vector consisting of n elements, the method comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unkno^yns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
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equations Ax=bi of the read coefficient matrix A and the read constant vector b, 
and 

performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax-b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 
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in the coefficient group calculation process, 

(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 

or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 

coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equations, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equations 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
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generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 

3 1 . (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (7=7,2, 

and the inverses of the diagonal elements m\ (i=l,2, ...,n) in the finite field GF(p) 
are denoted by /, (i=l,2,. . . ,n) 9 calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values t and U where 

n 

t. - Y\ m k ( exce Pt m i) m °d P (i = l>2>- . • ,n) 

k=\ 

and 

n 

t =Y\m k mod p 

k=\ 

(b) computing a value u where 
u^l/t mod p 

and 

(c) computing values Ii where 
Ii=uxti mod p (i=l,2,...,n) 

to find the inverses (7=7,2, ...,n). 

3 2 . (Currently Amended) The method of Claim 31, 

wherein computing values t and // involves calculating 

Si=m/xni2 mod p 
S2 = sjxms mod p 

[[']] 
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in the stated order, then calculating 

t n =s n -3xm n .i modp 
t n .i=s n -3xm n modp 
s n =m n -i xm n mod p 

t n -2 = Sn-4 x Sn mod p 

s n -i=m n .2xs n modp 

tn-3=Sn-5XS n - } mod p 

s n -2=m n .ixs n .i modp 

t n -4=Sn-6><Sn-2 mod p 
■[[ = ]] 

S5=m4xs<5 mod p 
t3=Sjxs5 modp 
S4=m3xssmodp 
t2=mjxs4 mod p 
ti= z m2xs 4 modp 
in the stated order, and lastly calculating 
t=tjxnij 

for a value j chosen from a set of positive integers {1,2, ...,n}. 
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